System information
• Basic Constraints. Shows CA certificates that are based on the Basic Constraints
extension.
• Type. Lists certain types of certificates, such as all certificates for subordinate CAs. This
search works only for certificates containing the Netscape Certificate Type extension,
which stores type information. For each type, choose from the drop-down list to find
certificates where that type is On, Off, or Do Not Care.
4. To find a certificate with a specific subject name, use the Subject Name section. Select the
check box, then enter the subject name criteria. Enter values for the included search criteria
and leave the others blank.
The standard tags or components are as follows:
• Email address. Narrows the search by email address.
• Common name. Finds certificates associated with a specific person or server.
• UserID. Searches certificates by the user ID for the person to whom the certificate belongs.
• Organization unit. Narrows the search to a specific division, department, or unit within an
organization.
• Organization. Narrows the search by organization.
• Locality. Narrows the search by locality, such as the city.
• State. Narrows the search by state or province.
• Country. Narrows the search by country; use the two-letter country code, such as US.
5. After entering the field values for the server to match, specify the type of search to perform:
• Exact searches for certificate subject names match the exact components specified and
contain none of the components left blank. Wildcards cannot be used in this type of search.
• Partial searches for certificate subject names match the specified components, but the
returned certificates may also contain values in components that were left blank. Wildcard
patterns can be used in this type of search by using a question mark (?) to match an
arbitrary single character and an asterisk (*) to match an arbitrary string of characters.
NOTE
Placing a single asterisk in a search field means that the component must be in
the certificate's subject name but may have any value. Leave the field blank if it
does not matter if the field is present.
6. After entering the search criteria, scroll to the bottom of the form, and enter the number of
Advanced Certificate Search
47